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DETAILED ACTION 

1 . This is a Final Office Action in response to the applicant's communication filed on July 
11,2008. 

2. Claims 1-9 and 28-30 have been examined and are pending. 

Information Disclosure Statement 

3. The information disclosure statement (IDS) submitted on July 11, 2008, February 25, 
2008 and March 18, 2004 have been considered by the examiner. 

Claim Objections 

4. Claims 1, 2, 6, 9, 28 and 29 are objected to because of the following informalities: claim 
1: lines 3, 6; claim 2: lines 2, 5; claim 6: line 2; claim 9: line 4; claim 14: line 3; claim 28: lines5, 
8; and claim 29: line 2 recites "remote device is capable of providing....". The claims do not 
recite a define action of "remote device is providing " and instead they suggest that what the 
remote device is "capable of and it renders the claims ambiguous to distinguish what the 
remote device is capable of and not capable of. The applicant argues that Appropriate 
correction is required. 

Response to Arguments 

5. Applicant's arguments with respect to claims 1-8 and 28-30 have been considered but are 
moot in view of the new ground(s) of rejection. 



Application/Control Number: 10/803,590 Page 3 

Art Unit: 2137 

In furthermore, the applicant argue that "It is respectfully submitted that Applicants are not 
claiming a device capable of providing a level of security, rather Applicants are claiming a 
method wherein certain claimed features determine if a remote device is capable of providing a 
level of security. As such, Applicants respectfully request the claim objections be withdrawn". 
The examiner disagrees with the applicant's because the applicant is actually claiming that if the 
adjacent intermediate device is capable of providing the level of security, then transmits the 
object to the adjacent intermediate and therefore, the examiner gave patentable weight to 
"capable of and found ambiguous it to define boundary and scope of the claims as explained 
above. Therefore, the applicant's argument is not persuasive to overcome the rejection. 

Claim Rejections - 35 USC §103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 



7. Claims 6-8 are rejected under 35 U.S.C. 103(a) as being unpatentable over Kaler et al. 
(hereinafter referred to as Kaler, US Pub No.: 2004/0139322 Al) in view of Shewchuk et al. 
(hereinafter referred to as Shewchuk, US Pub, No.: 2004/0139352). 
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8. transactions wherein the object is to be transmitted from a source device to a target 
device along a transmission .path that includes at least one intermediate device; 

As per claim 1 : 

Kaler discloses a method, comprising: 

determining security information associated with at least one object of transactions 
wherein the object is to be transmitted from a source device to a target device 
along a transmission .path that includes at least one intermediate device (0049); 

determining if an adjacent intermediate device in the transmission path is capable of 
providing a level of security (0029); and 

transmitting the object to the adjacent intermediate device in the transmission path in 
response to determining that the adjacent intermediate device is capable of 
providing the level of security (0110; 0119). 

Kaler does not explicitly disclose providing a level of security indicated by at least a 
portion of the security information. Shewchuk, in analogous art, however, disclose providing a 
level of security indicated by at least a portion of the security information (0014; 0017; 0043; 
0065; 0069; 0070). Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to modify the system disclosed by Kaler to include 
determining an alternative remote device that is capable of providing the level of security 
represented in response to determining that the remote device is not capable of providing the 
level of security. This modification would have been obvious because a person having ordinary 
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skill in the art would have been motivated to do to provide a uniformly representing and 
transferring security assertion and security response information as suggested by Shewchuk 
(0014-0015). 

As per claim 2: 

Kaler discloses a method, wherein the object is a business object, and wherein 
determining if the remote device is capable of providing the level of security comprises: 

transmitting to the adjacent intermediate device the transmission path information 

representative of the level of security that is desired (0049); and 
receiving a response from the adjacent intermediate device the transmission path 

indicating that the adjacent intermediate device the transmission path is capable of 

providing the desired level of security (01 10; 01 19). 

As per claim 3 : 

Kaler discloses a method, wherein determining the security information comprises 
accessing a header portion of the object (0078; 0079; 0081). 

wherein determining, if an adjacent intermediate device in the transmission path is 

capable of providing a level of security indicated comprises performing at least 

one of (00 16; 0030; 0081,0110): 
transmitting information representative of the level of security that is desired to the 

adjacent intermediate device in the transmission path prompts the intermediate 

device in the device in the transmission path to execute at least one module that 
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allows the adjacent intermediate device in the transmission path to provide the 
level of security (0016; 0030; 0081, 01 10); and 

comparing the adjacent intermediate device in the transmission path to a list of trusted 
devices in the header portion of the object (0016; 0030; 0081, 0110); 

wherein transmitting the object to the adjacent intermediate device in the transmission 
path comprises transmitting the object to an object handler module in the adjacent 
intermediate device in the transmission path (0039; 0052; 0067); 

wherein the object handler module is a business integration adapter supporting 
connectivity options, the connectivity options comprising at least one of packaged 
applications, custom applications, legacy applications, databases, trading partners' 
system, and public information stores on the internet (0039; 0052; 0067); 

wherein the object handler module supports at least one of event-driven real-time 
synchronous connections, asynchronous loosely coupled connections with trading 
partners, synchronous on-demand connections to customers and synchronous 
tightly coupled connections to trusted trading partners (0039; 0052; 0067). 

As per claim 4: 

Kaler discloses a method, wherein determining the security information comprises 
determining security information relating to at least one of connection information, class 
information, trusted entities information, and logging capability information (0010; 0043). 



As per claim 5 : 
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Kaler discloses a method, wherein accessing the header portion of the object comprises 
accessing at least one header of a Simple Object Access Protocol message (0080; 0081; 0095). 

As per claim 6: 

Shewchuk disclose determining an alternative intermediate device along a different 
transmission path that is capable of providing the level of security represented in response to 
determining that the adjacent intermediate device in the transmission path is not capable of 
providing the level of security (Figure 5: Validating message processor; 531; 01 15-01 16). 

As per claim 7: 

Kaler discloses a method, article and apparatus, comprising causing sending a message to 
the adjacent intermediate device in the transmission path instructing the adjacent intermediate 
device to execute at least one module that allows the remote device to provide the level of 
security (0086). 

As per claim 8: 

Kaler discloses a method, article and apparatus, wherein determining the security 
information comprises determining the security information in response to receiving the object 
from a remote device (0033). 



As per claim 28: 

Kaler discloses a method, comprising: 
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receiving, at a first device, a request from a second device desiring to transmit at least one 

object, wherein the request (0049; Figure 5: 534; 546); 
determining if the first device is capable of providing a level of security represented by 

the security parameter (0029; Figure 5: 534; 546); and 
transmitting an indication to the second device based on determining if the first device is 

capable of providing the level of security (01 10; 01 19). 

Kaler does not explicitly disclose a portion of security information associated with the 
object. Shewchuk, in analogous art, however, disclose a portion of security information 
associated with the object (0014; 0017; 0043; 0065; 0069; 0070). Therefore, it would have been 
obvious to a person having ordinary skill in the art at the time the invention was made to modify 
the system disclosed by Kaler to include a portion of security information associated with the 
object. This modification would have been obvious because a person having ordinary skill in the 
art would have been motivated to do to provide a uniformly representing and transferring 
security assertion and security response information as suggested by Shewchuk (0014-0015). 

As per claim 29: 

Kaler discloses a method, where configuring the first device with at least one module that 
allows the first device the capability of providing the level of security (Figure 3: 300; 312). 



As per claim 30: 
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Kaler discloses a method, where receiving the data object from the second device. 
(Figure 3: 311) 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See the notice of reference cited in form PTO-892 for additional prior art. 

10. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Contact Information 

11. Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Techane J. Gergiso whose telephone number is (571) 272-3784 
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and fax number is (571) 273-3784. The examiner can normally be reached on 9:00am - 6:00pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

IT. J. G.I 

Examiner, Art Unit 2137 



/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2137 



